Document and assert DoF/DofObject proc id identity

We recently talked about the current useful-but-unofficial behavior of "all DoFs on a DofObject belong to the same processor as the DofObject".  This patch makes that behavior official by documenting it and adding asserts for it.